We need to investigate how Cargo links to OpenSSL in our builds. If it statically links OpenSSL we'll have to make sure we release updates whenever a new OpenSSL vulnerability is discovered.